https://kgw.arvindkatoch.com/2017/08/threat-of-running-external-javascripts.html